Exam CRISC topic 1 question 498 discussion

What is the relationship between identifying a risk scenario and awareness training. The answer should be Identify Risk Owner.

Selected Answer: A The risk scenario is new. Therefore, the need to make the personnel aware of this " New" risk scenario.

C. Identify the risk owner. When a new risk scenario has been identified, the first step should be to identify the individual or group within the organization who will be responsible for managing and overseeing that specific risk. This person is often referred to as the "risk owner." The risk owner is accountable for understanding the risk, assessing its potential impact and likelihood, implementing necessary risk mitigation strategies, and ensuring ongoing monitoring and management of the risk. Once the risk owner is identified, further actions such as assessing the risk awareness and training programs, as well as estimating residual risk, can be undertaken in collaboration with the risk owner's input and guidance.

C. Identify the risk owner When a new risk scenario has been identified, the first step should be to identify the risk owner. The risk owner is the person responsible for managing the risk and for deciding on and implementing any necessary risk treatments. Once the risk owner is identified, they can then proceed with further steps like estimating the residual risk, deciding on risk treatment, and so on.

Its definitely C

C is the answer

When a RISK is identified, a manager or Sr. official in the org is identified as its owner. But Risk Scenario is different and the owners are not yet assigned at this time. It is part of the Risk Assessment - Identify, Analyze, Evaluate. So what is the correct answer?. How do we confirm the correct answers to all these questions?.

identify the Risk Owner -> Estimate the residual risk -> then A or B.

Echo C

Agree with all that C should be the answer but then again this is ISACA CRISC, so would be nice to know the correct answers...

C should be the answer